test: fix TestCurrentMembership to work with new owner validation

- Update role expectation from RoleViewer to RoleOwner in test assertion
- Fix 'no memberships' test case to work with sole owner validation
- Create proper test scenario where user can leave without being sole owner
- Use organization deletion for cleanup when user is sole owner

Signed-off-by: Miguel Martinez <miguel@chainloop.dev>

Author: migmartri

app/controlplane/pkg/biz/user_integration_test.go

@@ -142,8 +142,8 @@ func (s *userIntegrationTestSuite) TestCurrentMembership() {
 		s.NoError(err)
 		s.Equal(s.sharedOrg, got.Org)
 
-		// and it contains the default role
-		s.Equal(authz.RoleViewer, got.Role)
+		// and it contains the owner role (set in test setup)
+		s.Equal(authz.RoleOwner, got.Role)
 	})
 
 	s.Run("they have more orgs but none of them is the default, it will return the first one as default", func() {
@@ -171,12 +171,46 @@ func (s *userIntegrationTestSuite) TestCurrentMembership() {
 	})
 
 	s.Run("it will fail if there are no memberships", func() {
-		// none of the orgs is marked as current
+		// Create a test user who is not an owner so they can leave
+		testUser, err := s.User.UpsertByEmail(ctx, "test-no-membership@test.com", nil)
+		s.NoError(err)
+		
+		// Create a new org and make both testUser and userOne owners
+		testOrg, err := s.Organization.CreateWithRandomName(ctx)
+		s.NoError(err)
+		
+		// Add testUser as owner
+		_, err = s.Membership.Create(ctx, testOrg.ID, testUser.ID, biz.WithMembershipRole(authz.RoleOwner))
+		s.NoError(err)
+		
+		// Add userOne as viewer (so they can leave)
+		_, err = s.Membership.Create(ctx, testOrg.ID, s.userOne.ID, biz.WithMembershipRole(authz.RoleViewer))
+		s.NoError(err)
+
+		// Now userOne can leave because testUser is also an owner
 		mems, _ := s.Membership.ByUser(ctx, s.userOne.ID)
-		s.Len(mems, 1)
-		// leave the current org
-		err := s.Membership.Leave(ctx, s.userOne.ID, mems[0].ID.String())
+		// Find the membership for testOrg
+		var testOrgMembership *biz.Membership
+		for _, m := range mems {
+			if m.OrganizationID.String() == testOrg.ID {
+				testOrgMembership = m
+				break
+			}
+		}
+		s.NotNil(testOrgMembership)
+		
+		// userOne leaves testOrg (allowed because testUser is still owner)
+		err = s.Membership.Leave(ctx, s.userOne.ID, testOrgMembership.ID.String())
+		s.NoError(err)
+		
+		// Now userOne leaves their original organizations by deleting them directly
+		// since they are sole owners, they can delete the orgs instead of leaving
+		err = s.Organization.Delete(ctx, s.userOneOrg.ID)
+		s.NoError(err)
+		err = s.Organization.Delete(ctx, s.sharedOrg.ID) 
 		s.NoError(err)
+		
+		// Verify userOne has no memberships left
 		mems, _ = s.Membership.ByUser(ctx, s.userOne.ID)
 		s.Len(mems, 0)